CVE-2018-25078

The CVE-2018-25078 issue affects man-db prior to 2.8.5 on Gentoo. Root privileges can be gained because /usr/bin/mandb is executed by root but not owned by root, and ownership can allow stripping of setuid/setgid bits. The vulnerability is described across multiple sources (e.g., Gentoo GLSA 2023...

CVE-2015-1336

The CVE-2015-1336 entry concerns the man-db daily cleanup race in Mandb before 2.7.6.1-1 (Ubuntu/Debian packaging). A local user with access to the man account could escalate privileges via insecure chown usage in the mandb cleanup job. Affected software is the man-db package and the vulnerabilit...